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Reply to Office action of Apr. 8, 2004 

Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims: 

Claim 1 (original): A firewall for Internet protocol packets carrying data for a real-time 
Internet application, each of said Internet protocol packets being associated with any one of a 
signaling channel, a control channel, or a bearer channel of said real-time Internet application, the 
firewall comprising: 

an application proxy and a packet filter, 

the firewall applying the Internet protocol packets associated with the signaling channel 
and the control channel to the application proxy, and the firewall applying the Internet protocol 
packets associated with the bearer channel to the packet filter. 

Claim 2 (original): The firewall of claim 1 wherein said real-time Internet application is Voice 
over Internet Protocol (VoIP). 

Claim 3 (original): The firewall of claim 1 wherein said real-time Internet application is fax 
over Internet. 

Claim 4 (original): The firewall of claim 1 wherein said real-time Internet application is video 
over Internet 

Claim 5 (original): The firewall of claim 1 wherein said real-time Internet application is voice 
messaging over Internet. 

Claim 6 (original): The firewall of claim 1 wherein the application proxy instructs the packet 
filter as to which Internet protocol packets associated with a particular bearer channel to enable 
and disable for the duration of a session of said real-time Internet application. 
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Claim 7 (original): The firewall of claim 1 further including a Network Address Translation 
(NAT) process to translate any Internet Protocol (EP) addresses, Transmission Control Protocol 
(TCP) port numbers or User Datagram Protocol (UDP) port numbers contained at layer 3 and 
layer 4 of the Internet protocol packets associated with the signaling channel, the control channel 
and the bearer channel. 

Claim 8 (original): The firewall of claim 1 further including a Network Address Translation 
(NAT) process to translate any Internet Protocol (IP) addresses, Transmission Control Protocol 
(TCP) port numbers or User Datagram Protocol (UDP) port numbers contained at layer 7 of the 
Internet protocol packets associated with the signaling channel and the control channel. 

Claim 9 (original): The firewall of claim 8 wherein said application proxy instructs said NAT 
process to operate for the duration of a session of said real-time Internet application independent 
of data traffic flow. 

Claim 10 (original): The firewall of claim 1 further including a control logic process for 
specifying the operating parameters of the firewall. 

Claim 1 1 (original): The firewall of claim 1 wherein said application proxy and said packet 
filter are housed in any one of a dual homed commercial workstation, a general purpose 
workstation, a dedicated hardware firewall appliance, or an application specific integrated circuit. 

Claim 12 (currently amended): A method of protecting a computer network transmitting 
and receiving Internet protocol packets formatted in accordance with a real-time Internet 
protocol, each of said Internet protocol packets being associated with any one of a signaling 
channelj a control channel, or a bearer channel, the method comprising the steps of: 
L receiving a stream of Internet protocol packets, 
ii. applying the Internet protocol packets associated with the signaling 
channel and the control channel to fee an application proxy, and 
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iii. applying the Internet protocol packets associated with the bearer channel 
to the a packet filter. 

Claim 13 (original): The method of claim 12 further comprising the step of the application 
proxy instructing the packet filter as to which bearer channels to enable and disable for the 
duration of an Internet application session utilizing said real-time Internet protocol. 

Claim 14 (original): The method of claim 12 further comprising the step of applying a NAT 
process to translate any Internet Protocol (IP) addresses, Transmission Control Protocol (TCP) 
port numbers or User Datagram Protocol (UDP) port numbers contained at layer 3 and layer 4 of 
the Internet protocol packets associated with the signaling channel, the control channel and the 
bearer channel. 

Claim 15 (original): The method of claim 12 further comprising the step of applying a NAT 
process to translate any Internet Protocol (TP) addresses, Transmission Control Protocol (TCP) 
port numbers or User Datagram Protocol (UDP) port numbers contained at layer 7 of the Internet 
protocol packets associated with the signaling channel and the control channel. 

Claim 16 (original): The method of claim 14 further comprising the step of the application 
proxy instructing the NAT process to operate for the duration of an Internet application session 
utilizing said real-time Internet protocol independent of data traffic flow. 

Claim 17 (currently amended): A computer readable medium containing computer 
instructions for protecting an Internet Protocol network transmitting and receiving Internet 
protocol packets formatted in accordance with a real-time Internet protocol, each of said Internet 
protocol packers being associated with any one of a signaling channel, a control channel, or a 
bearer channel, said computer readable medium comprising computer program code, executable 
by a computer, for: 

i. receiving a stream of Internet protocol packets, 
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ii. applying the Internet protocol packets associated with the signaling 
channel and the control channel to the ag application proxy, and 

iii. applying the Internet protocol packets associated with the bearer channel 
to the a packet filter. 

Claim 1 8 (original): The computer readable medium of claim 1 7 further comprising computer 
program code, executable on a computer, for the application proxy to instruct the packet filter as 
to which bearer channels to enable and disable for the duration of an Internet application session 
utilizing said real-time Internet protocol. 

Claim 1 9 (original) : The computer readable medium of claim 1 7 further comprising computer 
program code, executable on a computer, for a NAT process, and for applying the NAT process 
to translate any Internet Protocol (IP) addresses. Transmission Control Protocol (TCP) port 
numbers or User Datagram Protocol (UDP) port numbers contained at layer 3 and layer 4 of the 
Internet protocol packets associated with the signaling channel, the control channel and the 
bearer channel 

Claim 20 (original): The computer readable medium of claim 1 7 further comprising computer 
program code, executable on a computer, for a NAT process, and for applying the NAT process 
to translate any Internet Protocol (IP) addresses, Transmission Control Protocol (TCP) port 
numbers or User Datagram Protocol (UDP) port numbers contained at layer 7 of the Internet 
protocol packets associated with the signaling channel and the control channel 

Claim 2 1 (currently amended); The computer readable medium of claim 2t 19 further 
comprising computer program code, executable on a computer, for the application proxy to 
instruct the NAT process to operate for the duration of an Internet application session utilizing 
said real-time Internet protocol independent of data traffic flow. 



5 



PAGE 7(14 " RCVD AT 7/2/2004 a:21:24 PM [Eastern DayDght Time] * SVR:USPT0-EFXRF-1i3 * DNIS:8729306 ^ CSID:46132328440 * DURATION (mm-ss):03^52 



